laravel@0.1.1
Changed
- laravel-models: reversed the mass-assignment guidance — models must define an explicit
$fillableallowlist (or the#[Fillable]attribute). Removed the previousModel::unguard()recommendation, which contradicted laravel-owasp-security's injection-prevention rule. Ownership/system fields (user_id,is_admin, …) stay out of$fillableand are set explicitly alongside$request->validated().
First tagged release of the Laravel toolkit plugin (16 backend skills, laravel-backend-specialist agent, 4 path-scoped rules); 0.1.1 supersedes the untagged 0.1.0.